PT-2021-7951 · Microsoft+3 · Asp.Net Core+4

Published 2021-06-08 · Updated 2024-05-29 · CVE-2021-31957

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ASP.NET Core (affected versions not specified)

Description The issue is related to insufficient input validation in the Microsoft .NET platform, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2021-2098

ALT-PU-2021-2100

ALT-PU-2021-2109

ALT-PU-2021-2111

ALT-PU-2022-1544

ALT-PU-2022-1546

ALT-PU-2022-1548

ALT-PU-2022-1552

BDU:2023-06553

BIT-DOTNET-2021-31957

BIT-DOTNET-SDK-2021-31957

CESA-2021_2352

CESA-2021_2353

CVE-2021-31957

GHSA-MCWM-2WMC-6HV4

RHSA-2021:2350

RHSA-2021:2351

RHSA-2021:2352

RHSA-2021:2353

RHSA-2021_2352

RHSA-2021_2353

Affected Products

.Net Framework

Alt Linux

Asp.Net Core

Centos

Red Hat

References · 26

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31957 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31957 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4PRVVLXXQEF4SEJOBV3VRJHGX7YHY2CG · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/PMHWHRRYDHKM6BIINW5V7OCSW4SDWB4W · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVCDYIP4A6DDRT7G6P3ZW6PKNK2DNWJ2 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31957 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-2021-31957 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31957 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2353.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VMAO4NG2OQ4PCXUQWMNSCMYWLIJJY6UY · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2021-31957 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-2352.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06553 · Security Note